Privacy Policy

This Privacy Policy describes the information Masklabs ("we," "us," "our") collects when you use our website, dashboard, API, and proxy network (the "Services"), the purposes for which it is collected, and how it is used. It forms part of our Terms of Service. Masklabs operates the Services from the United States and processes your information in the United States regardless of the location from which you access them.

1. Information We Collect

1.1 Account information. Upon registration, we collect your name, email address, and a hashed password.

1.2 Organization data. The Organizations to which you belong, your role in each (owner, admin, or member), and the invitations you send or receive.

1.3 Usage and bandwidth records. For each Credential created by your Organization, we record the quantity of bandwidth consumed and the time of consumption, in order to bill your Balance accurately and present your usage history.

1.4 Payment metadata. When you purchase data, our payment processor, Stripe, handles your card details directly. We receive and store only payment metadata: the amount, the currency, a timestamp, and a Stripe-issued reference. We do not receive or store your full card number, CVV, or bank account number.

1.5 Support communications. If you contact us by email or otherwise, we retain a record of the correspondence in order to assist you and maintain a support history.

1.6 Technical and log data. Standard web and server logs for the dashboard and API, such as IP address, user agent, and request timestamps, retained for security, diagnostics, and abuse prevention.

2. Your Proxied Traffic

Usage is metered by the volume of data transmitted through each Credential. Masklabs does not inspect, log, or retain the content of traffic routed through the Services. Usage records are limited to the quantity of bandwidth consumed and the time of consumption.

3. How We Use Information

We use the information described above to:

• Operate and bill the Services, which includes metering usage against your Balance and processing your payments
• Authenticate you and secure your account
• Send transactional email, such as receipts, security alerts, password resets, and service notices
• Respond to your support requests
• Detect and prevent fraud, abuse, and Acceptable Use Policy violations
• Comply with our legal obligations and enforce our agreements
• Maintain and improve the Services

We do not use your account information for advertising, and we do not sell it. We may create and use aggregated or de-identified information, which does not identify you, to operate and improve the Services.

4. Cookies and Sessions

We use a limited number of first-party cookies to keep you signed in (session cookies) and to retain display preferences such as your light or dark theme. We do not use third-party advertising or tracking cookies.

5. Error Diagnostics

We collect crash reports and exceptions from the dashboard and API on our own infrastructure in order to identify and correct defects. An error report may include technical context such as a stack trace and request metadata, and occasionally an account identifier, but never payment card data or the content of proxied traffic.

6. How We Protect Information

We maintain reasonable administrative, technical, and organizational measures designed to protect the information we hold against unauthorized access, loss, and misuse. No method of transmission or storage is entirely secure, and we therefore cannot guarantee absolute security.

7. Data Retention

We retain account, Organization, billing, and usage records for as long as your account is active, and thereafter for as long as necessary to meet accounting, tax, and legal obligations. Sign-in sessions and email verification tokens are retained only while valid and are removed once they expire. When you request deletion of your account (see Section 9), we delete or anonymize what we are able to while retaining the records we are legally required to keep, such as transaction records for tax purposes.

8. Sharing and Third Parties

We do not sell your personal information. We share it only with the service providers that help us operate Masklabs, each bound to use it solely for that purpose:

• Stripe, for payment processing
• Our infrastructure and hosting providers
• The mobile network operators that supply the IP addresses through which you connect

We may also disclose information where required by law, in response to a subpoena or other legal process, or to protect the rights, property, or safety of Masklabs, our customers, or the public, or to enforce our Terms of Service and Acceptable Use Policy. In connection with a merger, acquisition, or sale of assets, information may be transferred as part of that transaction and will remain subject to this Policy.

9. Your Choices and Rights

You may access, correct, or request deletion of your personal information by emailing [email protected]. We will verify that you are the account holder and respond within a reasonable time. Deletion of your account ends your access to the dashboard and proxy Credentials; as noted in Section 7, certain records may be retained where the law requires.

10. Children

The Services are not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that we have done so, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy. Where a change is material, we will post the updated policy with a new effective date and, where the law requires, notify you by email.

12. Contact

Questions regarding this Policy or your data may be directed to [email protected].